Overview

overview

10

Static

static

3

1b13571adb...d4.exe

windows7-x64

10

1b13571adb...d4.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b13571adbefb00ddb81853b80d527d4

  • Size

    380KB

  • Sample

    231225-nnj9asehg3

  • MD5

    1b13571adbefb00ddb81853b80d527d4

  • SHA1

    f23accfcd5fc9732340abf17f8cd8c56fbfcba8c

  • SHA256

    931b600b70cca0b1d116c605f544c6a6a6704d10c3333a0edfc461cc52550562

  • SHA512

    97b2c19ab6ee64377c4252535de6f3beb6cc5c0a04ac73da04b3bd03115578c6c6bc570b1653944fa057c5843c0dde4fc21957dad269165dc6d3517fce5e3528

  • SSDEEP

    6144:RmUaYZgQbXpo4oU0gupbx9A478pcaN2Gl8/OG5/ItqXu96OLUS:RYJCZoRO47RaEGeX5gtqy6SUS

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      1b13571adbefb00ddb81853b80d527d4

    • Size

      380KB

    • MD5

      1b13571adbefb00ddb81853b80d527d4

    • SHA1

      f23accfcd5fc9732340abf17f8cd8c56fbfcba8c

    • SHA256

      931b600b70cca0b1d116c605f544c6a6a6704d10c3333a0edfc461cc52550562

    • SHA512

      97b2c19ab6ee64377c4252535de6f3beb6cc5c0a04ac73da04b3bd03115578c6c6bc570b1653944fa057c5843c0dde4fc21957dad269165dc6d3517fce5e3528

    • SSDEEP

      6144:RmUaYZgQbXpo4oU0gupbx9A478pcaN2Gl8/OG5/ItqXu96OLUS:RYJCZoRO47RaEGeX5gtqy6SUS

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks